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DETAILED ACTION 



1 . Claims 9-1 9 are pending in this office action. 

2. Applicant's arguments, file November 28, 2006, have been considered and are 
persuasive. However, a new ground of rejection has been made. 

Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 103 

4. Claims 9-14, 18, and 19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ishiguro et al. (U.S. Patent No. 5,396,558) in view of Boers et al. 
(U.S. Patent No. 5,637,846). 

With respect to Claim 9, ishiguro et al, teaches a method of performing a 
transaction in a communication system between a first and a second participant wherein 
said second participant permits a service to be provided to said first participant in 
exchange for a payment (abstract), said method comprising the steps of: 
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• Upon initiation of said transaction by said first participant, said second participant 
sending a first message to said first participant, said first message including 
information pertaining to said second participant (col. 2, lines 40-42); 

• Said first participant verifying said information pertaining to said second 
participant to obtain assurance that said service will be provided upon assuring 
said payment (col. 2, lines 43-47); 

• Said first participant sending a second message to said second participant, said 
second message including information pertaining to said first participant (col. 2, 
lines 48-51); and 

• Said second participant verifying said information pertaining to said first 
participant to obtain assurance that payment will be secured upon provision of 
said service (col. 2, lines 52-56); 

• Upon verification of said information pertaining to said first participant, said 
second participant obtaining a digital signature for said first participant on said 
transaction using said second message (col. 3, lines 35-46). 

Ishiguro et al. does not teach whereby said second participant may obtain 
payment from a third participant using said digital signature. 



. Boers et al. teaches whereby said second participant may obtain payment from a 
third participant using said digital signature (col. 5, lines 39-65). 
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It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine obtaining payment from a third party using said digital 
signature, as taught by Boers et al. , with the system of Ishiguro et al. It would have 
been obvious for such modifications because the terminal (merchant) needs payment 
for the service they provide; by sending the PIN and other identifying Information to a 
bank for payment, the proper account (card holder's account) can be identified and the 
funds transmitted to the temninal. 

With respect to Claim 10, Ishiguro et al. in view of Boers et al. teaches the 
limitation of wherein said first participant is a holder of a card which performs 
cryptographic operations (see col. 2, lines 16-25 of Ishiguro et al.). The cryptographic 
operations are disclosed on col. 2, lines 26-61 . 

With respect to Claim 1 1 , Ishiguro et al. in view of Boers et al. teaches the 
limitation of wherein said second participant is a temiinal (see col. 2, lines 43-47 of 
Ishiguro et al.). 

With respect to Claim 12, Ishiguro et al. in view of Boers et al. teaches the 
limitation of wherein said third participant is a financial institution (see col. 5, line 48 of 
Boers et al.). 
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With respect to Claim 1 3, Ishiquro et al. in view of Boers et al. teaches the 
limitation of said information pertaining to said second participant included in said first 
message includes details and credentials of said second participant (see col. 2, lines 
48-51 of Ishiguro et al.); and said first participant verifies said details and said 
credentials (see col. 2, lines 52-56 of Ishiguro et al.). 

With respect to Claim 14, Ishiguro et al. in view of Boers et al. teaches the 
limitation of said information pertaining to said first participant included in said second 
message includes details and credentials of said first participant (see col. 2, lines 40-42 
of Ishiguro et al.); and said second participant verifies said details and said credentials 
(see col. 2, lines 43-47 of Ishiguro et al.). 

With respect to Claim 18, Ishiguro et al. in view of Boers et al. teaches the 
limitation of wherein said credentials include a public key certificate (see col. 2, lines 52- 
56 of Ishiguro et al.). The presence of a public key and terminal identification number 
being used to verify validity of a digital signature requires the presence of a public key 
certificate. > 

With respect to Claim 1 9. Ishiguro et al. in view of Boers et al. teaches the 
limitation of wherein said challenge is a nonce (see fig. 10 and col. 16, lines 1-6 of 
Ishiguro et al.). A time stamp is used as a time variant parameter to prevent against 
replay attacks. 
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Claims 15-17 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Ishiguro et al . (USPN '558) in view of BoersetaL (USPN '846) in further view of Chaum 
(U.S. Patent No. 5,276,736). 

With respect to Claim 15, all the limitation above are met by the combination of 
Ishiguro et al. in view of Boers et al. except the limitation disclosed below. 

Chaum meets the limitation of said second participant generating a response to 
said challenge (col. 3, lines 57-60); and said second participant sending a third 
message including said response to said first participant (col. 3, lines 57-60); and said 
first participant verifying said response (col. 3, lines 52-55 and 57-62); and said first 
participant sending a fourth message to said second participant such that said digital 
signature is provided by said second message and sajd fourth message (col. 4, lines 
20-27, 57-60). The message being signed reflects a digital signature being appended 
to the message being sent. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Chaum within the combination of 
Ishiguro et al and Boers et al. because verification of the challenge prevents an outside 
attacker from using a replay attack to gain access to the system. The challenge is 
unique and once verified, provides a greater guarantee that the transaction is in fact 
legitimate. 
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With respect to Claim 16, the combination of Ishiguro et al. in view of Boers et 
al./Chaum teach said second participant verifying information in said fourth message 
(see col. 4, lines 20-27 of Chaum); and said second participant completing said 
transaction by providing said service (see col. 4, lines 44-47 and 57-60 of Chaum); and 
said second participant sending said third participant a subset of said first, second, third 
and fourth messages to obtain said payment (see col. 4, lines 35-45 of Chaum). 

With respect to Claim 17, the combination of Ishiguro et al. in view of Boers et 
al./Chaum teach said third participant verifying said subset (see col, 4, lines 37-43 of 
Chaum); and said third participant providing said payment to said second participant 
(see col. 4, lines 44-47 of Chaum). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 

272- 3863. The examiner can nonnally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser G. Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 

273- 8300. 
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Information regarding tlie status of an application may be obtained from the 
Patent Application Infomiation Retrieval (PAIR) system. Status infomiation for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status infomiation for unpublished applications is available through Private PAIR only. 
For more infomiation about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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